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(54) FILE SHARING SYSTEM, PROGRAM AND FILE 
TRANSFERRING METHOD 

(57) Abstract: 

PROBLEM TO BE SOLVED: To acquire advanced 
security. 

SOLUTION: In this file sharing system, an access control 
server 2 is connected between a plurality of terminals 
1, .. sharing files and a file server 3 storing entity 
files through respective different networks 4 and 5, a 
terminal 1 can not access directly to the file server 3, 
and the access control server 2 judges access request 
contents from the terminal, and requests a file from the 
file server 3 to transfer the file to the request source 
terminal when the access request contents have 
appropriate authority. 
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ENGLISH TRANSLATION OF PERTINENT SECTIONS OF JAPANESE 
LAID-OPEN PATENT PUBLICATION NO.2002-342144 (filed on May 21, 2001) 

[Tiltle of the Invention] 

File Sharing System and Program, and File Transfer Method 

[Means Used to Solve the Problem] 

(1) To solve the above problems, a file sharing system according to the present 
invention in which a plurality of terminals share files using a network includes at least 
one file server that stores files; and a control server independent from the file server that 
manages access control information of the files, refers to the access control information 
based on an access request from one of the terminals, obtains a file from the file server 
according to a request authorization, and sends the obtained file to the requestor 
terminal. 

According to the present invention having the above configuration, an access 
control server that manages access control information of files is implemented between 
the terminals and the file server, and thereby, the access control server may refer to the 
access control information according to an access request from a terminal, determine 
whether authorization for the access request is given, and, if the access request is 
authorized, the access control server may obtain a file from the file server as necessary 
and transfer the obtained file to the requestor terminal. In this way, flexible access 
control may be realized. 

(2) A file sharing system according to the present invention includes a plurality 
of terminals that share files; at least one file server that stores the files; an access control 
server that manages access control information of the files and is connected to the 
terminals and the file server via differing networks. 

According to the present invention having the above configuration, the access 
control server is connected to the terminals and the file server via differing networks, 
and the access control server manages the access information of the files. In this way, 
security in the strict sense of the word may be guaranteed. 

(3) A program according to the present invention is run on a computer that 
receives a file access request from a terminal, requests for a file stored in a file server, 
and sends the file to the requestor terminal, the program administering the computer to 
realize: a file/user search function of referring to pre-arranged access control 
information based on a file name and identification data pertaining to a user that are 
described in a file access request format that is sent from the terminal, and determining 
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whether a logical file corresponding to the file name and identification data 
corresponding to the identification data in the access request format exist; a request type 
determination function of determining a type of the request described in the access 
request format when the existence of the logical file and user identification data is 
verified by the file/user search function; an authorization check function of determining 
whether the type of request determined by the request type determination function is in 
agreement with authorization set in the access control information; and a function of 
coordinating with the file server to execute the type of request when the authorization is 
recognized by the authorization check function. 

According to the present invention having the above configuration, a program 
for administering a computer to realize the above described functions is provided. 
Thus, when a file access request is received from a terminal, the computer refers to 
access control information based on information described in the access request format, 
searches for the requested file and the pre-registered user information, and when both 
file and user registration are found, determines the type of request described in the 
access request format, and whether the user has authorization to make the type of 
request, and when the authorization is recognized, the computer obtains a file from the 
file server according to the type of request and sends the file to the requestor terminal. 
In this way, a substantial file in the file server may be transferred while realizing 
flexible access control and maintaining high security depending on the definition of the 
access control information. 

(4) A shared file transfer method according to the present invention includes: 
an access request step of sending an access request according to a predetermined access 
request format from a terminal; a referring step in which an access control server 
managing access control information of files refers to the access control information 
based on a file name and identification data pertaining to a user that are described in a 
file access request format that is sent from the terminal, and determines whether a 
logical file corresponding to the file name and identification data corresponding to the 
identification data in the access request format exist; a request type determination step 
in which the access control server determines a type of the request described in the 
access request format when the existence of the logical file and the user identification 
data is verified in the referring step; an authorization check step in which the access 
control server refers to the access control information based on the type of request 
determined in the request type determination step and checks whether the type of 
request is authorized; and a transfer step in which the access control server sends a file 
list to the requestor terminal, or requests for a file to the file server and sends the 
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obtained file to the requestor terminal according to the type of request when 
authorization for the type of request is recognized in the authorization check step. In 
this way, a file is obtained from the file server according to the type of request and 
transferred to the requestor terminal, and thereby, a substantial file in the file server may 
be transferred to the requestor terminal while realizing flexible access control and 
maintaining high security. 
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